[Git][security-tracker-team/security-tracker][master] NFUs

[Moritz Muehlenhoff]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / 
security-tracker


Commits:
c3d58f6a by Moritz Muehlenhoff at 2018-04-20T12:29:30+02:00
NFUs

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -71,7 +71,7 @@ CVE-2018-10207
 CVE-2018-10206
        RESERVED
 CVE-2018-10205 (hyperstart 1.0.0 in HyperHQ Hyper has memory leaks in the ...)
-       TODO: check
+       NOT-FOR-US: HyperHQ Hyper
 CVE-2018-10204 (PureVPN 6.0.1 for Windows suffers from a SYSTEM privilege 
escalation ...)
        NOT-FOR-US: PureVPN
 CVE-2018-10203
@@ -889,7 +889,7 @@ CVE-2018-9863
 CVE-2018-9862 (util.c in runV 1.0.0 for Docker mishandles a numeric username, 
which ...)
        NOT-FOR-US: runV for Docker
 CVE-2018-9861 (Cross-site scripting (XSS) vulnerability in the Enhanced Image 
(aka ...)
-       TODO: check
+       NOT-FOR-US: ckeditor plugin
 CVE-2018-9860 (An issue was discovered in Botan 1.11.32 through 2.x before 
2.6.0. An ...)
        - botan 2.4.0-6
        - botan1.10 <not-affected> (Issue introduced in 1.11.32)
@@ -23952,7 +23952,7 @@ CVE-2018-1327 (The Apache Struts REST Plugin is using 
XStream library which is .
 CVE-2018-1326
        RESERVED
 CVE-2018-1325 (In Apache wicket-jquery-ui &lt;= 6.29.0, &lt;= 7.10.1, &lt;= 
8.0.0-M9.1, JS ...)
-       TODO: check
+       NOT-FOR-US: Wicket jQuery UI
 CVE-2018-1324 (A specially crafted ZIP archive can be used to cause an 
infinite loop ...)
        - libcommons-compress-java 1.13-2 (bug #893174)
        [stretch] - libcommons-compress-java <no-dsa> (Minor issue)



View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/commit/c3d58f6a8dc0bc35b791e62372b9831c4c0346d5

---
View it on GitLab: 
https://salsa.debian.org/security-tracker-team/security-tracker/commit/c3d58f6a8dc0bc35b791e62372b9831c4c0346d5
You're receiving this email because of your account on salsa.debian.org.

_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits